Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01cccd0b-8abc-343e-83f4-975f499db631.roa
File:                     01cccd0b-8abc-343e-83f4-975f499db631.roa (raw, json)
Hash identifier:          vL3mRET3rv0UWlux1BATGnIGfzaEyjyQvlCh6uE2bkQ=
Subject key identifier:   8E:FA:2C:C8:94:7D:D3:B5:37:A9:5A:09:E3:61:14:98:BE:87:BF:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858456822E43D6296D20468305000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01cccd0b-8abc-343e-83f4-975f499db631.roa
Signing time:             Tue 02 Apr 2024 01:00:26 +0000
ROA not before:           Tue 02 Apr 2024 01:00:26 +0000
ROA not after:            Mon 01 Jul 2024 01:00:26 +0000
asID:                     15353
IP address blocks:        2001:470:26d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:68:22:e4:3d:62:96:d2:04:68:30:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  2 01:00:26 2024 GMT
            Not After : Jul  1 01:00:26 2024 GMT
        Subject: CN=82d8eb4f-6fc9-49e9-a28d-ea107a6810fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:62:f1:b8:60:70:90:58:0c:87:fe:8e:d9:
                    f7:28:0c:67:98:12:55:a3:4e:67:83:98:4d:01:3d:
                    4c:d3:8e:37:c6:5b:3e:70:4a:9b:25:01:82:79:96:
                    2d:78:93:f4:70:e5:62:ed:5a:36:36:3d:d2:d0:15:
                    ff:f7:7f:e0:12:95:a0:fd:21:1c:32:f6:ca:e4:5e:
                    3c:dd:22:48:0a:a0:b9:f2:f8:8f:af:be:3f:7b:5e:
                    84:b2:21:50:b0:00:b3:12:fb:c6:a2:06:e4:aa:5b:
                    ec:14:46:2d:75:8a:8c:d1:50:f8:f4:f4:7d:48:22:
                    da:ea:9e:80:af:ac:c6:1c:0d:f0:65:71:f8:20:0e:
                    79:fc:a4:27:53:a6:dc:a6:58:7a:5e:7d:7d:72:54:
                    93:13:f1:61:38:91:62:1a:cd:0a:2e:2b:5e:d1:49:
                    97:bd:89:d3:6d:e8:82:98:db:27:c3:6a:a3:20:a4:
                    f8:00:f7:87:6b:ca:f7:2f:20:63:08:be:9a:ca:42:
                    9d:cc:4b:4d:3e:d1:16:68:f3:d7:ba:45:e5:d9:45:
                    ff:5b:dd:10:8b:86:f3:3e:f9:88:a9:9b:00:26:cd:
                    73:91:9d:c2:17:1b:83:f1:09:db:15:bb:a8:39:0c:
                    bc:83:5b:b5:4a:e7:9e:b7:a3:2a:c1:df:d3:70:34:
                    9c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:2C:C8:94:7D:D3:B5:37:A9:5A:09:E3:61:14:98:BE:87:BF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01cccd0b-8abc-343e-83f4-975f499db631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:d3:e7:61:c3:1b:09:11:8c:5c:2a:4a:8d:7e:fd:ec:20:b3:
         50:48:38:a5:5c:41:f5:a0:ca:95:e6:0f:b3:dc:9e:5a:4a:b8:
         27:1b:7b:38:57:6d:c8:b9:cd:0b:da:8b:24:2d:dd:97:46:1b:
         85:18:2a:78:0b:b1:b8:9d:20:8e:c1:76:0b:07:71:ab:83:73:
         50:9a:07:ef:97:04:f3:82:d0:2d:c9:ea:ed:e6:7d:a9:c1:e1:
         2c:dc:be:a1:38:e2:e9:72:c7:b4:f1:3a:4f:42:ed:c0:61:58:
         43:e6:dc:b5:cb:7c:d8:ca:eb:57:6b:4c:45:46:e0:d0:f2:6a:
         7f:b3:47:b2:05:59:48:99:ed:ed:67:5c:9d:aa:22:6b:34:ac:
         34:d4:5e:f9:97:01:46:79:92:f1:72:e5:e5:a2:93:37:69:82:
         e9:fa:80:25:d3:44:6d:8f:65:3d:60:8c:4a:85:9f:30:f0:9f:
         1e:72:41:4b:82:f9:fa:3f:fb:1a:d9:cf:b8:20:ed:9c:2d:6e:
         fa:23:4b:3d:49:38:99:59:ee:30:a4:81:2f:0b:ce:af:c3:f5:
         3b:6f:67:19:d3:bf:67:aa:3f:f6:46:59:98:e5:cb:f6:0b:27:
         0b:0e:85:91:c3:03:83:c2:83:a8:6f:7a:5b:4d:8f:ff:8e:d1:
         0e:58:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:50:41 2024 by rpki-client on console-ams.rpki-client.org